1.9 KiB
1.9 KiB
encrypt swap partition
sources :
- wiki.archlinux.org - dm-crypt/Swap encryption
- help.ubuntu.com - Enable Hibernate With Encrypted Swap
apt-get install ecryptfs-utils
swapoff -a
cryptsetup luksFormat --cipher aes-xts-plain64 --verify-passphrase --key-size 256 /dev/nvme0n1p2
cryptsetup open /dev/<device> cryptswap
mkswap /dev/mapper/cryptswap
edit : /etc/default/grub
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash resume=UUID=4fd1ffc-6d5b-450a-9737-abf1ffb80b1"
update-grub
Now ajust /etc/fstab to use your mapper, replace your encrypt swap device like bellow :
/dev/mapper/cryptswap none swap discard 0 0
add your encrypt swap device define in /etc/crypttab
cryptswap /dev/nvme0n1p2 none luks
swapon -a
printf "RESUME=UUID=/dev/mapper/cryptswap" | tee /etc/initramfs-tools/conf.d/resume
Register these changes.
update-initramfs -u -k all
to be solve
cryptsetup: ERROR: Couln't resolve device rpool/ROOT/ubuntu_...
cryptsetup: WARNING: Couln't determine root device
disable encrypt swap partition
- Turn off swap
swapoff /dev/mapper/cryptswap1
-
remove your encrypt swap device define in your /etc/crypttab
-
ajust /etc/fstab to use your real swap partition
/dev/nvme0n1p2 none swap discard 0 0
- Change your /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT to
GRUB_CMDLINE_LINUX_DEFAULT="quiet splash resume=/dev/nvme0n1p2"
update-grub
- edit /etc/initramfs-tools/conf.d/resume. Replace the existing RESUME line with the following line.
RESUME=/dev/nvme0n1p2
Register these changes.
update-initramfs -u -k all
- make your partition a swap
mkswap /dev/nvme0n1p2
- activate swap
swapon -a